SIEM Architect: Azure Sentinel & AI Security Monitoring

Deel; Lombardia; Hybrid; EUR 35,000 - 50,000; Full time

Benefits offered by this job

Competitive base salary

Bonus and equity

Learning budget

Flexible hybrid work policy

Wellbeing resources

Job summary

Domyn SpA is seeking an Information Security Analyst in Milan to build and run a new SIEM capability. You will triage alerts, investigate security events, and shape detections across SIEM, EDR, and cloud logs while collaborating with security engineering, DevOps, and governance.

The role emphasizes MS Sentinel mastery, cloud security, and AI-related threat awareness, with a flexible policy allowing work from home or office.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience).
• Proven experience in security monitoring, SOC operations, or alert/incident investigation.
• Hands-on experience building or operating a SIEM from scratch, with strong, demonstrable knowledge of Microsoft Sentinel.

Responsibilities

• Monitor network and cloud environments for security events, triaging and investigating alerts across SIEM, EDR, and cloud-native logging sources.
• Design, build, and operate a SIEM capability from zero — log source onboarding, workspace and architecture design, correlation and detection rules, use case development.
• Own the full security event lifecycle: detection, triage, investigation, escalation, and remediation tracking.
• Configure and tune perimeter and network security controls — IDS/IPS, WAF, and next-generation firewalls — and validate their effectiveness.
• Apply monitoring and detection practices to cloud-native and hybrid infrastructure (Azure primary) including containers and IAM surfaces.
• Track AI-related attack patterns and OWASP Top 10 for web and LLM/GenAI applications to harden AI-integrated systems.
• Collaborate with security engineering, DevOps, and governance to close monitoring gaps.

Skills

SIEM

Microsoft Sentinel

Cloud security

IDS/IPS

WAF

Kubernetes

IAM

Python/PowerShell/KQL

Education

Bachelor's degree in Computer Science or Information Security

Tools

Microsoft Sentinel

Splunk

QRadar

Elastic

Job description

Domyn SpA is seeking an Information Security Analyst in Milan to build and run a new SIEM capability. You will triage alerts, investigate security events, and shape detections across SIEM, EDR, and cloud logs while collaborating with security engineering, DevOps, and governance.

The role emphasizes MS Sentinel mastery, cloud security, and AI-related threat awareness, with a flexible policy allowing work from home or office.